{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/zoneminder--1.37.64/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2024-51482"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ZoneMinder (\u003c= 1.37.64)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["ZoneMinder"],"content_html":"\u003cp\u003eCVE-2024-51482 is a time-based blind SQL injection vulnerability affecting ZoneMinder versions through 1.37.64. The flaw exists within the event management functionality of the application. An authenticated attacker can trigger this vulnerability by sending specially crafted requests to the \u003ccode\u003e/zm/index.php\u003c/code\u003e endpoint, specifically targeting the \u003ccode\u003eremovetag\u003c/code\u003e action and the \u003ccode\u003etid\u003c/code\u003e parameter. The vulnerability enables attackers to extract data from the backend database using conditional \u003ccode\u003eSLEEP\u003c/code\u003e payloads.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows authenticated attackers to perform database enumeration and dump sensitive information, including user credentials stored in the \u003ccode\u003ezm.Users\u003c/code\u003e table. The CVSS score for this vulnerability is 9.9.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade ZoneMinder to version 1.37.65 or later immediately to patch the vulnerability.\u003c/li\u003e\n\u003cli\u003eAudit access logs for authenticated users performing frequent or anomalous POST requests to \u003ccode\u003e/zm/index.php\u003c/code\u003e with the \u003ccode\u003eaction=removetag\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eRestrict access to the ZoneMinder interface to trusted networks only.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-24T04:05:34Z","date_published":"2026-10-24T04:05:34Z","id":"https://feed.craftedsignal.io/briefs/2026-10-zoneminder-sqli/","summary":"An authenticated time-based blind SQL injection vulnerability in ZoneMinder versions up to 1.37.64 allows attackers to exfiltrate sensitive database information via the removetag action.","title":"ZoneMinder: Authenticated SQL Injection in event management (CVE-2024-51482)","url":"https://feed.craftedsignal.io/briefs/2026-10-zoneminder-sqli/"}],"language":"en","title":"CraftedSignal Threat Feed - ZoneMinder (\u003c= 1.37.64)","version":"https://jsonfeed.org/version/1.1"}